Compliance-engine

8-trins sikkerheds-pipeline · capture → rate-limit → PraxisRisk → PraxisTrust → audit → anomaly → decision → Min Log

Vælg scenario at simulere

Capture

IP · user-agent · geo · session-id

Rate-limit

IP + user · sliding window 15 min · exp backoff

PraxisRisk

Score 0-100 · device · velocity · pattern

PraxisTrust 2

MitID / passkey / TOTP step-up beslutning

Audit-event

Append-only · hash-chain · patient-visible

Anomaly-detection

Impossible travel · new device · TOR · behavioral

Decision

Allow / challenge / block · reason-coded

Min Log opdatering

Synkroniser til borger.dk · patientens nationale log

Klar til at køre · Normal login · Pilar

MacBook · Aarhus · kendt enhed

PraxisRisk forventet: 12 · decision: ALLOW

847

Allowed

838

Challenged

Blocked

Anomalies

False-pos

risk ≥ 70

BLOCK + notify ejer + Datatilsynet

risk 35-69

CHALLENGE + step-up

risk < 35

ALLOW

TOR exit-node

BLOCK · uanset risk

Impossible travel

BLOCK + IP-ban 30 min

Ny enhed

CHALLENGE + notify bruger

Hver login-event vises i patientens Min Log på borger.dk hvis det involverer adgang til deres journal · GDPR Art. 15.